• Google Chrome silently downloaded a massive AI model onto devices without user consent
• Users deleting Gemini Nano files watched Chrome reinstall everything automatically afterward
• Regulators are now facing questions about consent laws and silent AI deployments

Google Chrome has been quietly downloading a 4GB AI model called Gemini Nano onto user devices without asking for permission first.

The file, named weights.bin, lives deep inside Chrome's user profile directory and powers on-device AI features like "Help me write" and scam detection.

Users cannot find any checkbox in Chrome Settings labelled "download a 4GB AI model" because no such option exists at all.

Silent download is causing outrage among users

The environmental cost of pushing 4GB to hundreds of millions of devices is staggering by any reasonable measure.

At Chrome's global scale, the climate bill for one model push lands somewhere between 6,000 and 60,000 tonnes of CO2 equivalent emissions - roughly the annual output of a small wind farm or the emissions from thousands of passenger cars every single year.

Mobile data plans in many parts of the world treat 4GB as a month's entire allowance, yet Chrome consumes that in one unrequested download.

When users try to opt out of the AI tools by deleting the weights.bin file, Chrome treats the action as a transient error to be corrected on the next eligible window and re-downloads the entire 4GB package again.

The only ways to make the deletion permanent require disabling AI features through chrome://flags or enterprise policy tools that home users do not typically possess.

A freshly created Chrome profile that received zero keyboard or mouse input from any human still contained the full 4GB model within 15 minutes of being created.

The browser downloaded the file while sitting idle, waiting for a five-minute timer to expire on a third-party website.

What makes this legally and ethically problematic

The ePrivacy Directive explicitly prohibits storing information on a user's device without prior, informed, and unambiguous consent.

Chrome functions perfectly well without a 4GB on-device LLM, so no "strictly necessary" exemption applies to this situation.

The GDPR requires transparency and fairness in processing personal data, but users were never told about the download at all.

The most visible AI feature in Chrome's omnibox, labelled "AI Mode", does not even use the on-device model, as those queries go straight to Google's servers instead of being processed locally on the user's own device.

This makes the 4GB install a pure cost imposed on users with no offsetting privacy benefit at all.

The company has not published any analysis of the welfare impact on populations whose internet access is metered and limited.

Also, regulators are yet to answer whether global tech corporations are exempt from statutes that have been on the books since 2002.

Via The Privacy Guy

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.